System for performing a validity check of a user device

Abstract

There is disclosed a system for performing a validity check of a user device having an application stored thereon. The apparatus comprises a coupling device operable to communicate with the user device via near field communication, a processor, and memory storing program code for execution by the processor and validity check data. The program code comprises executable instructions to receive a determinate user device identifier from the user device via the coupling device and to receive application data from the user device via the coupling device, the application data being characteristic of the application stored on the user device. The program code processes the user device identifier and the application data to generate a test token, and determines whether the test token is a valid token using the validity check data.

The invention claimed is: 
     
       1. A system for performing a validity check of a user device having an application stored thereon, the system comprising:
 a coupling device operable to communicate with the user device via near field communication; 
 a processor; and 
 memory storing program code for execution by the processor, 
 wherein the program code comprises executable instructions to: 
 receive a determinate user device identifier from the user device via the coupling device; 
 after receiving the user device identifier, receive application data from the user device via the coupling device, the application data comprising at least a primary account number (PAN) and an expiry date of the PAN associated with the application stored on the user device; 
 generate a test token by concatenating and then hashing at least the user device identifier, the primary account number, and the expiry date; 
 compare the generated test token to a list of valid tokens received from an issuer computer; and 
 determine that the test token is a valid token when the test token matches a token from the received list of valid tokens; 
 wherein the program code comprises: 
 a set of instructions to determine the presence of the user device within coupling range of the coupling device and to perform an anti-collision process in case of the presence of multiple user device within coupling range of the coupling device, 
 wherein the user device identifier is received during the anti-collision process. 
 
     
     
       2. A system according to  claim 1 , wherein the set of instructions is a first set of instructions, and the program code further comprises:
 a second set of instructions for interacting with the application stored by the user device, 
 wherein the user device identifier is received during execution of the first set of instructions and the application data is received during execution of the second set of instructions. 
 
     
     
       3. A system according to  claim 1 , further comprising a network interface, wherein the program code comprises instructions for receiving the list of valid tokens via the network interface. 
     
     
       4. A system according to  claim 1 , further comprising a network interface, wherein the program code comprises executable instructions to, in response to determining that the test token is not a valid token:
 generate a validation request message comprising payment data; 
 transmit the validation request message to a remote validation system via the network interface; 
 receive a validation reply message via the network interface; and 
 if the validation reply message indicates that the payment data is valid, update the list of valid tokens to include the test token. 
 
     
     
       5. A system according to  claim 1 , wherein the program code comprises instructions for processing payment data from a payment application stored by the user device. 
     
     
       6. A system according to  claim 5 , wherein the program code further comprises instructions for generating payment data in association with the primary account number. 
     
     
       7. A system according to  claim 6 , wherein the coupling device is mounted to an entry barrier for a mass transportation system, wherein the payment data permits travel on the mass transportation system. 
     
     
       8. A system according to  claim 1 , wherein the system is part of a mass transportation system. 
     
     
       9. A method of performing a validity check of a user device having an application stored thereon, the method comprising:
 receiving, by a coupling device via near field communication, a determinate user device identifier from the user device; 
 receiving, by the coupling device, via near field communication, application data from the user device, the application data comprising at least a primary account number (PAN) and an expiry date of the PAN associated with the application stored on the user device; 
 generating, by the coupling device, a test token by concatenating and then hashing at least the user device identifier, the primary account number, and the expiry date; 
 comparing, by the coupling device, the generated test token to a list of valid tokens received from an issuer computer; and 
 determining, by the coupling device, that the test token is a valid token when the test token matches a token from the received list of valid tokens, 
 wherein the method further comprises: 
 determining the presence of the user device within coupling range of the coupling device and performing an anti-collision process in case of the presence of multiple user device within coupling range of the coupling device, 
 wherein the user device identifier is received during the anti-collision process. 
 
     
     
       10. A method according to  claim 9 , further comprising:
 processing payment data from a payment application stored by the user device. 
 
     
     
       11. A method according to  claim 10 , further comprising generating ticket data in association with the primary account number following successful validation of the test token. 
     
     
       12. A computer program embodied in a non-transitory computer readable medium comprising a set of instructions that, when executed by a processor, cause the processor to perform steps including:
 receiving, via near field communication, a determinate user device identifier from a user device; 
 after receiving the user device identifier, receiving, by a coupling device via near field communication, application data from the user device, the application data comprising at least a primary account number (PAN) and an expiry date of the PAN; 
 generating a test token by concatenating and then hashing at least the user device identifier, the primary account number, and the expiry date; 
 comparing the generated test token to a list of valid tokens received from an issuer computer; and 
 determining that the test token is a valid token when the test token matches a token from the received list of valid tokens, wherein the steps further include: 
 determining the presence of the user device within coupling range of the coupling device and performing an anti-collision process in case of the presence of multiple user device within coupling range of the coupling device, 
 wherein the user device identifier is received during the anti-collision process.